#personal-data-exposure

[ follow ]
fromTechCrunch
1 day ago

Bug in jury systems used by several US states exposed sensitive personal data | TechCrunch

The bug meant it was possible for anyone to obtain the information about jurors who are selected for service. To log into these platforms, a juror is provided a unique numerical identifier assigned to them, which could be brute-forced since the number was sequentially incremental. The platform also did not have any mechanism to prevent anyone from flooding the login pages with a large number of guesses, a feature known as "rate-limiting."
Privacy technologies
#data-breach
fromTechCrunch
1 week ago
Information security

DoorDash confirms data breach impacting users' phone numbers and physical addresses | TechCrunch

fromTechCrunch
1 week ago
Information security

DoorDash confirms data breach impacting users' phone numbers and physical addresses | TechCrunch

Information security
fromTheregister
2 weeks ago

Washington Post admits Clop crew lifted bank and SSN data

Nearly 10,000 employees and contractors had sensitive personal data stolen in Clop-linked attacks exploiting a previously unknown Oracle E-Business Suite vulnerability.
Information security
fromSecuritymagazine
3 weeks ago

1.2M Individuals' Data Stolen In University Hacking

A cyber incident at the University of Pennsylvania led to mass malicious emails and alleged theft of personal data of about 1.2 million community members.
UK news
fromwww.independent.co.uk
4 weeks ago

Confidential information leaked after MoD official left laptop open on train

UK mishandling of Afghan resettlement data exposed thousands' personal details through laptop and email blunders, placing Afghan helpers at risk from the Taliban.
Information security
fromDataBreaches.Net
1 month ago

Hacking Formula 1: Accessing Max Verstappen's passport and PII through FIA bugs - DataBreaches.Net

A Mass Assignment vulnerability in the FIA Driver Categorization Portal allowed administrative takeover and exposed drivers' passports, licenses, and personal data within minutes.
fromDataBreaches.Net
1 month ago

Hotel and Casino near Las Vegas Strip suffers data breach, documents say - DataBreaches.Net

OYO Hotel & Casino Las Vegas was hit by a cyberattack sometime in early January, allegedly exposing the personal information of more than 4,700 people, according to documents provided by authorities in Maine. OYO Hotel and Casino, located just off the Las Vegas Strip on Tropical Avenue near Koval Lane and owned by OYO Hotels and Highgate Hotels, suffered the data breach sometime between Jan. 8 and Jan. 11, affecting a total of 4,741 people, according to information provided by the Maine Attorney General's office.
Information security
#ransomware
Information security
fromTheregister
3 months ago

TransUnion says 4.5M affected in third-party cyberattack

A third-party application breach exposed personal data of 4,461,511 individuals, while credit reports and core credit data were not affected.
fromTechCrunch
3 months ago

TransUnion says hackers stole 4.4 million customers' personal information | TechCrunch

Credit reporting giant TransUnion has disclosed a data breach affecting more than 4.4 million customers' personal information. In a filing with Maine's attorney general's office on Thursday, TransUnion attributed the July 28 breach to unauthorized access of a third-party application storing its customers' personal data. TransUnion claimed "no credit information was accessed," but provided no immediate evidence for its claim. The data breach notice did not specify what specific types of personal data were stolen.
Information security
[ Load more ]